encrypt-decrypt-backup

Compare original and translation side by side

🇺🇸

Original

English

🇨🇳

Translation

Chinese

Encrypt/Decrypt Backup

加密/解密备份

Encrypt and decrypt BSV backup files using the bitcoin-backup CLI (

bbackup

使用bitcoin-backup CLI（

bbackup

）加密和解密BSV备份文件。

When to Use

适用场景

Encrypt wallet JSON to secure
```
.bep
```
backup file
Decrypt
```
.bep
```
backup to read wallet data
Create BAP identity backups
Secure ordinals keys and payment keys
Store sensitive BSV data encrypted at rest

将钱包JSON加密为安全的.bep备份文件
解密.bep备份以读取钱包数据
创建BAP身份备份
保护ordinals密钥和支付密钥
静态存储加密的敏感BSV数据

Supported Backup Types

支持的备份类型

All backups use

.bep

format (AES-256-GCM encryption):

BapMasterBackup - BAP identity (Type42 or Legacy)
BapMemberBackup - Individual BAP member
WifBackup - Single private key
OneSatBackup - Ordinals + Payment + Identity keys
VaultBackup - Encrypted vault
YoursWalletBackup - Yours Wallet format
YoursWalletZipBackup - Yours Wallet ZIP format

所有备份均采用.bep格式（AES-256-GCM加密）：

BapMasterBackup - BAP身份（Type42或传统版）
BapMemberBackup - 单个BAP成员
WifBackup - 单个私钥
OneSatBackup - Ordinals+支付+身份密钥
VaultBackup - 加密保险箱
YoursWalletBackup - Yours Wallet格式
YoursWalletZipBackup - Yours Wallet ZIP格式

Usage

使用方法

Run the encrypt or decrypt scripts:

bash

undefined

运行加密或解密脚本：

bash

undefined

Encrypt a wallet JSON file

加密钱包JSON文件

bun run /path/to/skills/encrypt-decrypt-backup/scripts/encrypt.ts wallet.json output.bep

Decrypt a backup file

解密备份文件

bun run /path/to/skills/encrypt-decrypt-backup/scripts/decrypt.ts backup.bep

Decrypt to specific output file

解密到指定输出文件

bun run /path/to/skills/encrypt-decrypt-backup/scripts/decrypt.ts backup.bep wallet.json

undefined

bun run /path/to/skills/encrypt-decrypt-backup/scripts/decrypt.ts backup.bep wallet.json

undefined

Flow's BSV Convention

Flow的BSV约定

This skill follows agent's BSV backup convention:

Storage Location:

/.flow/.bsv/

```
backups/
```
- Encrypted .bep files
```
temp/
```
- Temporary decrypted files (auto-cleanup)
```
config.json
```
- Backup registry

Security:

Never hardcodes passwords
600k PBKDF2 iterations for strong encryption

此Skill遵循Agent的BSV备份约定：

存储位置：

/.flow/.bsv/

```
backups/
```
- 加密的.bep文件
```
temp/
```
- 临时解密文件（自动清理）
```
config.json
```
- 备份注册表

安全性：

绝不硬编码密码
600k次PBKDF2迭代以实现强加密

Password Handling

密码处理

Scripts accept passwords in two ways (priority order):

Command-line argument - Pass password directly for interactive use
Environment variable - Set
```
BACKUP_PASSPHRASE
```
for automation/CI

脚本支持两种密码输入方式（优先级顺序）：

命令行参数 - 直接传入密码，适用于交互式使用
环境变量 - 设置
```
BACKUP_PASSPHRASE
```
，适用于自动化/CI场景

Requirements

要求

```
bbackup
```
CLI installed globally:
```
bun add -g bitcoin-backup
```

全局安装
```
bbackup
```
CLI：
```
bun add -g bitcoin-backup
```

CLI Reference

CLI参考

The bitcoin-backup CLI provides three commands:

bbackup enc <input> -p <password> -o <output>

- Encrypt JSON to .bep

bbackup dec <input> -p <password> -o <output>

- Decrypt .bep to JSON

bbackup upg <input> -p <password> -o <output>

- Upgrade legacy backups

bitcoin-backup CLI提供三个命令：

bbackup enc <input> -p <password> -o <output>

- 将JSON加密为.bep格式

bbackup dec <input> -p <password> -o <output>

- 将.bep格式解密为JSON

bbackup upg <input> -p <password> -o <output>

- 升级旧版备份

Error Handling

错误处理

Password too short (min 8 chars) - Returns error
Invalid backup structure - Validation error
Wrong password - Decryption fails with error
Auto-detects backup type and iteration count

密码过短（最少8个字符）- 返回错误
无效的备份结构 - 验证错误
密码错误 - 解密失败并返回错误
自动检测备份类型和迭代次数